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IN THE CLAIMS : 

Amended claims follow. 



1 . (Previously Amended) A method implemented using a computer for dynamic 
adaptation of a system in accordance with a contract with criteria associated 
therewith, comprising: 

governing a security-related interaction between a plurality of components of 
the system utilizing the criteria of the contract, the components including an 
intrusion detection module which is subject to the governing; 

determining whether the security-related interaction between the components 
of the system meets the criteria of the contract; and 

adapting the security-related interaction between the components of the 
system upon the criteria of the contract not being met. 

2. (Previously Amended) The method as recited in claim 1 , wherein the 
security-related interaction between the components of the system is adapted 
by adjusting the contract. 

3. (Original) The method as Tecited in claim 2, wherein the contract is adjusted 
by a method selected from the group consisting of deactivation of the 
contract, modification of the contract, deletion of the contract, and activation 
of a different contract. 

4. (Original) The method as recited in claim 1, wherein the criteria of the 
contract include cost model criteria. 

5. (Original) The method as recited in claim 4, wherein the cost model criteria 
is based on resource utilization. 

6. (Previously Amended) The method as recited in claim 4, wherein the cost 
model criteria is based on performance. 



Received (torn < 408 971 4660 > at 11/4/03 6:11:55 PM [Eastern Standard Time] 



Nov 04 03 04:10p SVIPG 



408 971 4660 



-3- 

7. (Original) The method as recited in claim 4, wherein the cost model criteria 
is based on service provisioning. 

8. (Cancelled) 

9. (Previously Amended) The method as recited in claim 1, wherein the 
components include the intrusion detection module and an analysis module. 

10. (Cancelled) 

1 1 . (Previously Amended) A computer program product for dynamic adaptation 
of a system in accordance with a contract with criteria associated therewith, 
comprising: 

(a) computer code for governing a security-related interaction between a 
plurality of components of the system utilizing the criteria of the contract, the 
components including an intrusion detection module which is subject to the 
governing; 

(b) computer code for determining whether the security-related interaction 
between the components of the system meets the criteria of the contract; and 

(c) computer code for adapting the security-related interaction between the 
components of the system upon the criteria of the contract not being met. 

1 2. (Previously Amended) The computer program product as recited in claim 1 1, 
wherein the security-related interaction between the components of the 
system is adapted by adjusting the contract. 

13. (Original) The computer program product as recited in claim 12, wherein the 
contract is adjusted by a method selected from the group consisting of 
deactivation of the contract, modification of the contract, deletion of the 
contract, and activation of a different contract. 

14. (Original) The computer program product as recited in claim 1 1 , wherein the 
criteria of the contract includes cost model criteria. 
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15. (Original) The computer program product as recited in claim 14, wherein the 
cost model criteria is based on resource utilization. 

16. (Original) The computer program product as recited in claim 14, wherein the 
cost model criteria is based on performance. 

1 7. (Original) The computer program product as recited in claim 14, wherein the 
cost model criteria is based on service provisioning. 



18. (Cancelled) 

19. (Previously Amended) The computer program product as recited in claim 1 1, 
wherein the components include the intrusion detection module and an 
analysis module. 

20. (Previously Amended) An apparatus for dynamic adaptation of a system in 
accordance with a contract with criteria associated therewith, comprising: 

a module for: 

(a) governing a security-related interaction between a plurality of components of 
the system utilizing the criteria of the contract, the components including an' 
intrusion detection module which is subject to the governing; 

(b) determining whether the security-related interaction between the components 
of the system meets the criteria of the contract; and 

(c) adapting the security-related interaction between the components of the 
system upon the criteria of the contract not being met. 

21 . (Previously Amended) A method implemented using a computer for dynamic 
adaptation of a system in accordance with a contract with criteria associated 
therewith, comprising: 

governing a security-related interaction between a plurality of components of 
the system utilizing the criteria of the contract, the components including a plurality 
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of intrusion detection modules, and at least one firewall which are subject to the 
governing; 

determining whether the security-related interaction between the components 
of the system meets the criteria of the contract utilizing an analysis module; and 

adapting the security-related interaction between the components of the 
system upon the criteria of the contract not being met utilizing the analysis module; 

wherein the security-related interaction between the components of the 
system is adapted by adjusting the contract by a method selected from the group 
consisting of deactivation of the contract, modification of the contract deletion of 
the contract, and. activation of a different contract. 

22. (Previously Presented) The method as recited in claim 2 1 , wherein the 
intrusion detection modules are adapted for communicating information to 
the analysis module for detecting intrusions. 

23. (Previously Presented) The method as recited in claim 22, wherein 
information includes generalized intrusion detection objects. 
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